Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
File:                     mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json)
Hash identifier:          kXN/uWyFESSfv4mfnwsujlftMx26usKnDRIQwHAmdCA=
Subject key identifier:   39:36:D6:9D:E1:3E:66:F5:98:EE:F7:B4:34:FF:55:48:23:47:FA:21
Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
Certificate issuer:       /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
Manifest number:          EE
Signing time:             Mon 27 Jul 2026 08:28:42 +0000
Manifest this update:     Mon 27 Jul 2026 08:28:41 +0000
Manifest next update:     Mon 03 Aug 2026 08:28:41 +0000
Files and hashes:         1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: lfU1AX2Csf40ePiiGUir5bVJOjKV25ckFSI9KJJSOdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
                          rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
        Validity
            Not Before: Jul 27 08:28:41 2026 GMT
            Not After : Aug  3 08:28:41 2026 GMT
        Subject: CN=6a6716ba-deb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:34:e3:3c:ec:eb:c4:3d:51:4b:d8:a2:a8:
                    28:98:f6:ba:82:fd:61:0f:ac:63:87:16:0a:13:5c:
                    73:53:a0:24:df:43:83:a1:b8:07:52:f5:34:66:3e:
                    41:a2:d3:cd:b4:2b:10:50:f5:26:88:c0:43:a1:ec:
                    87:9b:55:b0:39:19:62:66:ce:98:ad:c2:f7:2a:7a:
                    0c:72:0e:d0:fa:23:a1:65:d8:be:9a:b7:fb:f4:23:
                    e6:ea:34:59:e5:a9:39:4f:80:41:9c:73:0a:76:27:
                    46:0d:cb:a7:99:77:a7:59:3b:7d:32:b7:59:ab:f1:
                    93:ca:5c:b4:58:3d:b2:f0:b7:2d:63:21:a9:fa:07:
                    a5:90:9d:79:3c:3d:34:bf:9b:30:3f:05:6c:4c:71:
                    75:99:96:9b:07:db:4f:8a:ce:53:b2:7b:06:c9:4e:
                    05:53:f0:e5:31:07:51:5f:01:49:6b:8e:0d:95:28:
                    cd:bc:6b:57:48:47:df:84:69:3e:01:e6:84:62:67:
                    f8:a2:d0:25:4f:e6:e2:0a:7c:60:36:90:9b:bc:7d:
                    2b:08:28:3e:8c:74:7a:02:07:dc:5e:40:a2:5d:e0:
                    97:35:4e:24:c5:3f:8c:d6:af:f5:69:49:19:84:77:
                    b9:f0:47:95:96:13:72:63:72:7e:c7:5f:b4:a1:8e:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:36:D6:9D:E1:3E:66:F5:98:EE:F7:B4:34:FF:55:48:23:47:FA:21
            X509v3 Authority Key Identifier:
                keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:39:b5:14:c2:6b:64:b9:37:cd:c7:76:c5:eb:a0:d0:a6:74:
         c5:90:72:62:e2:5c:0c:6c:52:a2:0d:7b:9f:3f:3c:2b:ef:7d:
         cd:cd:a4:90:7a:c9:60:1f:b9:c1:66:62:53:5a:88:f4:05:46:
         1b:b6:7f:b2:cb:9b:b0:af:47:79:a6:72:59:6b:90:31:43:f6:
         f2:6e:1c:90:55:b5:0c:e0:59:ea:ae:f3:9d:e3:34:a6:23:dc:
         54:73:94:7b:8d:cc:fe:1e:16:b1:e6:44:d8:94:ee:0f:9f:27:
         08:08:0b:cc:ec:e6:2b:d4:51:00:20:ba:01:9d:06:c4:96:b3:
         f1:50:2a:1c:66:0b:b7:94:52:d6:f5:9f:8f:ee:b1:38:d0:37:
         32:f2:82:bb:ab:9e:5f:09:b0:c5:1a:2d:b5:3f:d4:2d:5e:1d:
         f6:c9:54:07:91:59:21:55:80:b0:d0:7c:69:9e:29:f0:b7:87:
         80:d3:90:bc:8b:c6:45:ce:f5:75:77:69:28:26:a2:b1:c1:f7:
         3b:4f:a5:64:70:84:49:ee:9c:64:eb:61:b1:e3:af:cc:a3:af:
         d3:ce:b4:c7:3c:15:af:a5:86:f5:f0:82:a3:59:92:0f:6e:ba:
         38:59:69:ce:17:13:ff:3f:7b:b7:b2:36:86:4a:24:13:3a:4a:
         12:8b:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:17 2026 by rpki-client